Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/0574cafc-14e2-3a0a-99db-f11b644a02bc.roa
File:                     0574cafc-14e2-3a0a-99db-f11b644a02bc.roa (raw, json)
Hash identifier:          mnXX0El2nnryn38vXOO8rUBOL8zNN+V45k4z0XKceys=
Subject key identifier:   C7:B0:45:AB:C4:F8:80:43:BB:17:9E:32:C4:0D:D6:DC:C6:11:5D:B6
Certificate issuer:       /CN=020bd06a-b3dc-4d29-a79f-95b698c161c3
Certificate serial:       010D0C9F4328584596DEFE3812861F5378B2EDA0
Authority key identifier: 20:E2:49:61:BD:F2:DD:48:7E:FA:95:5B:E5:10:C9:4E:03:EF:6A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/0574cafc-14e2-3a0a-99db-f11b644a02bc.roa
Signing time:             Thu 18 Apr 2024 18:46:38 +0000
ROA not before:           Thu 18 Apr 2024 18:46:38 +0000
ROA not after:            Wed 17 Jul 2024 18:46:38 +0000
asID:                     395823
IP address blocks:        2620:10:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:de:fe:38:12:86:1f:53:78:b2:ed:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020bd06a-b3dc-4d29-a79f-95b698c161c3
        Validity
            Not Before: Apr 18 18:46:38 2024 GMT
            Not After : Jul 17 18:46:38 2024 GMT
        Subject: CN=8d1fd4a2-9fed-494a-99f8-54636c6fa5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:41:3c:d1:bc:34:a7:73:48:20:2e:2d:6f:
                    65:a0:3e:43:e5:b7:43:fa:3a:bb:52:e7:99:cc:6b:
                    be:32:7a:e1:ee:18:a8:c0:cc:7f:34:19:2a:9b:fe:
                    8c:e6:8c:fb:d4:17:be:37:7a:d3:42:b6:10:73:71:
                    e8:eb:e4:c0:22:7b:7a:36:0b:67:6c:01:70:fe:33:
                    80:52:35:a4:86:10:99:84:fb:d0:38:25:cc:f3:b4:
                    84:46:a9:5f:dc:01:28:90:01:ba:13:25:75:4a:ff:
                    22:29:d6:bb:00:88:96:94:da:6e:d6:7e:f2:9c:df:
                    52:c5:c6:e8:4d:c1:42:ef:e1:50:87:24:a3:e2:ac:
                    ae:df:29:41:32:66:5f:3a:3a:03:04:55:38:97:23:
                    6d:81:41:d9:f3:55:f7:20:44:70:89:80:8f:a3:92:
                    ae:40:e8:41:a9:59:0c:1b:1b:c7:1f:2d:ac:2f:37:
                    32:12:a4:13:2f:97:69:9a:05:8f:3f:f5:bc:e0:ba:
                    a0:91:dd:b2:4b:78:51:d7:33:c0:34:4b:f8:b1:05:
                    50:7c:10:9f:53:f3:9f:08:a1:d1:2e:7b:47:5c:e3:
                    f5:f5:d4:9c:e0:5c:11:5d:ac:5b:95:2d:ef:8f:6d:
                    0e:51:e0:7a:3d:1b:d7:65:c8:6d:04:a2:48:ca:ab:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:45:AB:C4:F8:80:43:BB:17:9E:32:C4:0D:D6:DC:C6:11:5D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/0574cafc-14e2-3a0a-99db-f11b644a02bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/020bd06a-b3dc-4d29-a79f-95b698c161c3.crl

            X509v3 Authority Key Identifier:
                keyid:20:E2:49:61:BD:F2:DD:48:7E:FA:95:5B:E5:10:C9:4E:03:EF:6A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:ca:1c:3c:86:d0:cd:35:13:05:46:9c:61:e8:4d:51:bc:
         28:b3:9a:66:b5:17:3a:24:c6:2f:ed:bc:69:76:e2:77:d1:f2:
         29:02:2f:bd:cc:71:9a:d8:b4:e4:44:61:b7:cf:b9:25:7d:96:
         4a:11:71:66:78:de:68:d7:c7:98:59:f2:69:91:8f:1c:8d:18:
         13:e3:7f:b2:21:14:52:27:d7:89:e0:d5:94:52:dd:64:b4:bb:
         b4:d0:cc:a4:f3:d2:ae:c0:e2:d8:c2:45:0d:cd:73:aa:ac:87:
         e7:01:62:22:a1:cd:6f:3b:d6:be:c9:08:02:fb:2d:c0:b5:87:
         6b:53:c3:5e:4f:a2:22:a1:43:98:36:b3:70:7a:d7:34:47:f0:
         3f:97:63:f8:99:f4:c3:2d:b0:51:45:5e:0a:07:67:73:f3:4a:
         e5:4e:19:0d:e6:bc:62:88:fe:4b:bc:7e:48:dc:1d:6b:c3:a6:
         73:6e:21:a5:6c:d1:d7:86:f8:0b:2c:0a:76:72:f0:f5:be:6c:
         45:51:71:8b:4b:c9:84:0c:b3:ff:f6:3e:4c:af:2e:06:37:55:
         a5:52:c6:4b:a0:6a:8d:c7:3b:96:2a:8e:d6:73:54:36:fb:5f:
         b6:9f:0f:53:b7:43:f5:e9:15:68:7e:47:54:ef:46:83:6c:8b:
         65:7a:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----